Security · High impactFan score 89 · Tier S11 sources
FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’
The Brief · written from 11 sources
- Datadog Security Labs reports in-the-wild activity from ARTEX, an AI-native penetration framework, targeting AWS environments.
- The campaign includes CloudWatch log hunting using compromised access keys.
- Attackers also abuse public Amazon Cognito user pools.
Why it matters
Developers running AWS workloads should assume automated, agent-driven attacks can search logs for leaked credentials and probe identity services such as Cognito.
Who’s affected
- Teams running workloads in AWS
- Teams using Amazon Cognito user pools
Open source hacking tool Artex "significantly reduces the time required to chain attack techniques, with some intrusions progressing from initial targeting to privileged access in under three hours," the FBI said.
Timeline
Full coverage · 11 sources
- 2h ago ↗
The Record from Recorded Future News
FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’
- 3h ago ↗
Cisco Talos Blog
ARTEX and beyond: AI-enabled penetration testing platforms - 4h ago ↗
- 9h ago ↗
Step Security Blog
ARTEX: Attackers Adopted This AI Pentesting Tool in Three Months. Leaked Secrets Are Its Fastest Way In. - 5d ago ↗
Datadog Security Labs
On the hunt for ARTEX: understanding agentic attacks in AWS environments - 6d ago ↗
- 7d ago ↗
Microsoft Security Blog
ARTEX abuse expands as cybercriminals target financial sector - 7d ago ↗
AI News & Artificial Intelligence | TechCrunch
Hundreds of Artex AI hacking tools found publicly exposed to the web - 8d ago ↗
The Hacker News
Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs - 8d ago ↗
BleepingComputer
Hackers backdoor Linux servers using trojanized CWP web server - 9d ago ↗
The Hacker News
CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access